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CLAIMS 

1. Method of payment by electronic cheque , 

in particular in the case of a direct transaction 
5 between solely: 

- a payment issuer furnished with a medium (1) 
comprising at least one blank electronic cheque 
certified by a financial institution (BA) and an 
overall amount useable at least partially in respect of 

10 the electronic cheque, and 

- a recipient of the payment furnished with a device 
(3) adapted to receive at least one aforesaid 
electronic cheque of the abovementioned medium (1) , 

the method comprising, so that the device (3) can 
15 recognize the authenticity of the medium (1) and of a 
cheque being received, 

- a calculation by the medium (1) of a table (5) , 
possibly partial, on the basis of at least one set of k 
base values (S [1] , . . . S [k] ) , by applying successively to 

20 each of them n times an irreversible function (OWF) 
with parameter (s) differing preferably with each 
application and giving k intermediate values n times, 

- a calculation by the medium (1) of a secret key 
(SK) on the basis of the last k intermediate values of 

25 order n and, on the basis of this key (SK) , a 
calculation of a distinctive sign (IM C f) of the cheque, 

- a transmission by the medium (1) to the device 
(3) of the distinctive sign (IM C f) calculated for the 
electronic cheque, 

30 - a financial commitment of the medium (1) in 

relation to the device (3) , as regards the cheque, by 
supplying to the device (3), 

- a first result (0_AC_I) of an irreversible function 
(OWF) via which was processed the result (AC_I) of a 

35 first algorithm (MAC) combining a secret verification 
key (SVK) , originating from the financial institution 
(BA) issuing the electronic cheque, and dynamic 
parameters (CDP) of this cheque, and 
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- a second result (AC_C) of a second algorithm (MAC) 
combining the secret key (SK) calculated for the 
medium, the dynamic parameters (CDP) of this cheque and 
the first result (0_AC_I) hereinabove, 

5 - at least one random/pseudo-random guesstimation, 

by the device (3) , of k numbers m of successive 
applications of the irreversible function (OWF) to the 
k base values (S [1] , . . . S [k] ) , the k numbers m lying 
between zero and n and possibly being different from 
10 one another, the sum of the k numbers m having to be a 
determined constant, 

- a transmission of the result of the 
guesstimation by the device (3) to the medium (1), 

- a response by the medium (1) to the said 
15 guesstimation by the device (3) , comprising on the one 

hand, the result (AC_I) of the first algorithm 
combining the secret verification key (SVK) and the 
dynamic parameters (CDP) of the cheque and, on the 
other hand, a set of the k intermediate values obtained 
20 during the successive applications of the irreversible 
function (OWF) to each of the k base values 
(S [1] , • . .S [k] ) the number or numbers of times m lying 
between zero and n, 

- by the device (3) : 

25 - successive applications of the irreversible function 
(OWF) to each of the k intermediate values of order (s) 
m until the last k intermediate values of order n are 
obtained, 

- a calculation of the said secret key (SK) on the 
30 basis of these last k intermediate values of order n 

and, on the basis of this secret key (SK) , a 
calculation of the distinctive sign (IM C f) of the 
cheque, 

- a comparison of the distinctive sign (IM C f) thus 
35 calculated and of the distinctive sign (IM C f) calculated 

by the medium (1) and received from the latter, 

- a verification by calculation and comparison in the 
device (3) of the said second result (AC C) of the 
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second algorithm (MAC) and of that received from the 
medium (1) , 

- a verification by calculation and comparison in the 
device (3) of the said first result (0_AC_I) of an 

5 irreversible function (OWF) and of that received from 
the medium (1) and, 

- if the said comparison and verifications each give 
equality, an acceptance and a storage by the device (3) 
of the electronic cheque issued by the medium (1) . 

10 2. Method according to Claim 1, characterized in 

that the sum of the k numbers m is a constant equal to 
n*k/2 if the product n*k is even or, if this product is 
odd, to (n*k-l)/2. 

3. Method according to one or other of Claims 1 

j 

15 and 2, characterized in that it comprises: 

- a storage in the medium (1) of at least one 
electronic cheque template (CF) useable to make at 
least one aforesaid cheque, 

- a transmission by the medium (1) to the device (3) 
20 of: 

- a series of h distinctive signs ( IM C f [ 1 • • - h] ) of 
a cheque, each associated with a distinct set of k base 
values (S [1] , . . . S [k] ) contained in the medium (1), 

- an index (i) , lying between 1 and h, for 
25 designating a particular distinctive sign (IM C F[i]) from 

among the h aforementioned distinctive signs, 

- a digital signature (SIGN C f) produced by the 
issuing financial institution (BA) so as to guarantee 
the said distinctive signs ( IM C f 1 1 * • • h] ) , and 

30 - a use by the device (3), for the said comparison, of 
the particular distinctive sign (IM C F[i] ) determined by 
the index (i) in the guise of distinctive sign (IM CF ) 
received from the medium (1) , and 

- a verification by the device (3) of the said digital 
35 signature (SIGNcf) by means of a public key (PK B ) known 

to the device (3) . 

4. Method according to any one of Claims 1 to 3, 
characterized 
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- in that it comprises, in respect of the 
transaction, a transmission by the medium (1) to the 
device (3) of non-secret data which may be the 
identification (ID B ) of the financial institution (BA) 
5 which certifies the electronic cheque and, as 
appropriate, the public key (PK B ) of the issuing 
financial institution (BA) and a certificate (CERT B ) of 
this public key (PK B ) issued by a certificate authority 
(CA) , and 

10 - in that the device verifies in this case the 

authenticity of the said certificate (CERT B ) by means 
of another public key (PK C a) $ known to the device (3) , 
of the certificate authority (CA) . 

5. Method according to any one of Claims 1 to 4, 

15 characterized in that the medium (1) can be reloaded as 
regards its overall amount and/or its number (i) of 
electronic cheques in the course of a link with the 
abovementioned financial institution (BA) or one of its 
delegates . 

2 0 6. Method according to one or other of Claims 1 to 

5, characterized in that it comprises, for the 
calculation of the table (5) by the medium (1) , a 
mother base value (SD CF ) common to each column (l...k) 
of the table (5), and an application to this mother 

25 base value of at least one irreversible function (SOWF) 
preferably with different parameter (s) for each column 
(1. . .k) . 

7. Method according to Claim 5, characterized in 
that in the course of a reloading of the medium (1), it 

30 is furthermore supplied with an identification (ID C f) of 
cheque templates, updated abovementioned static 
parameters (SP C f) t a series of h distinctive signs 
(IM C F [1 • • -h] ) , an abovementioned digital signature 
(SIGNcf) and a determined number of base values 

35 (S [1] , . . . S [k] ) or, as appropriate, of at least one 
aforesaid common base value (SD C f) • 

8. Method according to any one of Claims 1 to 7, 
characterized in that the device (3) records, during a 
transaction, the result (AC_I) of the first algorithm 
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and/or, as appropriate, an identification (ID B ) of the 
aforesaid financial institution (BA) and/or an 
identification (ID C f) of the template of the electronic 
cheque received and/or the identification (ID C ) of the 
5 medium (1) . 

9. Method according to any one of Claims 1 to 8, 

characterized 

- in that in respect of incremental payments of the 
kind by telephone card, the dynamic parameters (CDP) of 

10 the cheques moreover comprise: 

- the amount or the sequence of amounts 
corresponding to the authorized incremental payments, 

- a base chaining value (Z 0 ) , 

- a chaining of successive values (Zj) which each 
15 stem successively from the application of an 

irreversible function to the immediately following 
value (Zj+i) , and 

- in that after having performed with the hereinabove 
device (3) a protocol for payment by electronic cheque, 

20 the medium (1) can perform an incremental payment by 
supplying the receiving device (3) with successive 
chaining values (Z lf Z 2 , Z 3 , . . . ) , the device (3) 
preserving a record of the last value (Zj) received and 
of the corresponding index (j). 

25 10. Method according to any one of Claims 1 to 9, 

characterized in that it comprises a cancellation of a 
transaction of payment by cheque from the medium (1) to 
the device (3) . 

11. Method according to Claim 10, characterized in 

30 that it comprises in respect of the aforementioned 
cancellation, 

- a storage, in the device (3) , of at least one 
electronic cheque template, issued by the financial 
institution (BB) of the device (3) , and of secret data 

35 relating to this template, 

- a programming of the medium (1) in such a way 
that the latter cannot receive a payment by cheque 
other than from the device (3) to which a transaction 
was previously paid by means of the said medium (1) , 
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the latter storing the cancellation payment cheque 
until the medium (1) is presented to its corresponding 
financial institution (BA) , in particular for a 
reloading of the medium (1). 
5 12. Method according to any one of Claims 1 to 11, 

characterized in that it furthermore comprises steps of 
inverse authentication via which the medium (1) can for 
its part recognize the authenticity of the device (3) . 

13. Method according to Claim 12, characterized in 
10 that the steps of inverse authentication are of the 

same kind as those for the authentication of the medium 
(1), whilst requiring, as appropriate, only a single 
distinctive sign (IM C f) of electronic cheque template. 

14. Method according to one or other of Claims 12 
15 and 13, characterized in that it comprises, for at 

least some of the inverse authentication steps, the use 
of an element (7) for communication between the medium 
(1) and the device (3), this communication element (7) 
preferably being held by the payment issuer which holds 
20 the said medium (1) . 

15. Method according to one or other of Claims 1 to 
14, characterized in that it comprises, in the medium 
(1), a combination of each of the various distinctive 
signs (IM C F[i] ) r at a first level, by means of 

25 irreversible functions (OWHF) each time with another 
value or another distinctive sign (IMcfE!'])* in that 
the results (Vi, V 2 ; V 3 , V 4 ) of each pair of 
applications of the irreversible function (OWHF) are 
combined at a second level via another application of 

30 the irreversible function (OWHF) so as to give new 
results (V 5 , V 6 ) to be combined at a third level via one 
or other applications of the irreversible function 
(OWHF) and so on and so forth until a single result 
(0_IM C f) is obtained, and which is signed, as deduced 

35 distinctive sign, by the digital signature (SIGN C f) so 
as to sign the cheques issued. 

16. Method according to Claim 15, characterized in 
that it comprises, for a verification by the device (3) 
of the deduced distinctive sign (0_IM C f) r a transmission 
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from the medium (1) each time of the second distinctive 
sign (IM C F[i]) used in a first combination (OWHF) at the 
first level and, at each succeeding level, of the 
intermediate result (V 2 , V 6 ) of the irreversible 
5 functions (OWHF) , which is used so as to be combined 
successively with the corresponding intermediate result 

(Vi, V 5 ) obtained on the basis of the second distinctive 
sign (IM C F[i])/ until the deduced distinctive sign 

(O-IMcf) is obtained. 
10 17. Payment system for implementing the method 

according to any one of Claims 1 to 16, characterized 
in that it comprises 



15 - a blank electronic cheque certified by a financial 
institution (BA) , 

- an overall amount useable at least partially in 
respect of the electronic cheque, 

- at least one distinctive sign (IM CF ) for this cheque, 
20 which may be included in the latter, 

- at least one set of k base values (S [1] , . . .S [k] ) 
which may be derived from a single mother value (SDcf) / 

- a secret verification key (SVK) originating from the 
financial institution (BA) issuing the electronic 

25 cheque, and 

- dynamic parameters (CDP) of the said cheque, and 

- with means of calculation 

- of a table (5) on the basis of the k base values 
(S [1] , . . . S [k] ) , by applying successively to each of 

30 them n times an irreversible function (OWF) with 
parameter (s) differing preferably with each application 
and giving k intermediate values n times, 

- of a secret key (SK) on the basis of the last k 
intermediate values of order n and, on the basis of 

35 this key (SK) , of a distinctive sign (IM C f) of the 
cheque, 

- of a first result (0_AC_I) of an irreversible 
function (OWF) via which was processed the result 
(AC I) of a first algorithm (MAC) combining the secret 
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- with means for storing at least 
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verification key (SVK) and dynamic parameters (CDP) of 
the cheque, and 

- of a second result (AC__C) of a second algorithm (MAC) 
combining the secret key (SK) calculated for the 

5 medium (1), the dynamic parameters (CDP) of this cheque 
and the first result (0_AC_I) hereinabove, and 

- with means of direct dialogue with at least one 
device (3) adapted to receive at least one aforesaid 
electronic cheque from the abovementioned medium (1) 

10 and among other things the distinctive sign (IM CF ) of 
the said cheque, 

- the device (3) being equipped 

- with means of random/pseudo-random guesstimation 
of k numbers m of successive applications of the 

15 irreversible function (OWF) to the k base values 
(S [1] , . . . S [k] ) , the k numbers m lying between zero and 
n and possibly being different from one another, the 
sum of the k numbers m having to be a determined 
constant, 

20 - with means of direct dialogue corresponding to 

those of the medium (1), so as among other things to 
carry out a transmission of the result of the 
guesstimation to the medium (1) , 

- with means of calculation 

25 - successively applying the irreversible function (OWF) 
to each of the k intermediate values of order m until 
the last k intermediate values of order n are obtained, 

- of the said secret key (SK) on the basis of these 
last k intermediate values of order n and, on the basis 

30 of this secret key (SK) , a calculation of the 
distinctive sign (IM C f) of the cheque, 

- means of comparison of the distinctive sign 
(IMcf) thus calculated and of the distinctive sign 
(IMcf) calculated by the medium (1) and received from 

35 the latter, 

- means of verification by calculation and 
comparison of the said second result (AC_C) of the 
second algorithm (MAC) and of that received from the 
medium ( 1 ) , 
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- means of verification by calculation and 
comparison of the said first result (0_AC_I) of an 
irreversible function (OWF) and of that received from 
the medium (1) and, 

5 - means of storage of at least the electronic 

cheque issued by the medium (1), if the said comparison 
and verifications each give equality. 

18. System according to Claim 17, characterized in 
that: 

10 - the means of storage of the medium (1) are devised so 
as to store at least one electronic cheque template 
(CF) useable to make at least one aforesaid cheque, 

- the means of dialogue of the medium (1) are devised 
so as to transmit to the device (3) : 

15 - a series of h distinctive signs ( IM C f[ 1 • • ♦ h] ) of 

a cheque, each associated with a distinct set of k base 
values (S [1] , . . . S [k] ) contained in the medium (1), 

- an index (i) , lying between 1 and h, for 
designating a particular distinctive sign (IMcfEI]) from 

20 among the h aforementioned distinctive signs, 

- a digital signature (SIGN C f) produced by the 
issuing financial institution (BA) so as to guarantee 
the said distinctive signs ( IM C f [ 1 • • • h] ) , and 

- the device (3) is devised so as to use, for the said 
25 comparison, the particular distinctive sign (IMcF[il) 

determined by the index (i) in the guise of distinctive 
sign (IM C f) received from the medium (1) , and 

- the device (3) comprises means of calculation devised 
so as to verify the said digital signature (SIGN C f) by 

30 means of a public key (PK B ) known to the device (3) . 

19. System according to Claim 18, characterized in 
that: 

- the means of dialogue of the medium (1) are 
devised so as to transmit to the device (3) non-secret 

35 data which may be the identification (ID B ) of the 
financial institution (BA) which certifies the 
electronic cheque and, as appropriate, the public key 
(PK B ) of the issuing financial institution (BA) and a 
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certificate (CERT B ) of this public key (PK B ) issued by a 
certificate authority (CA) , and 

- the device is devised so as to verify the 
authenticity of the said certificate (CERT B ) by means 
5 of another public key (PK C a) * known to the device (3) , 
of the certificate authority (CA) . 

20. System according to any one of Claims 17 to 19, 
characterized in that it comprises as medium (1) a 
payment card (2) of the integrated circuit type and as 

10 device (3) a payment terminal (4) with reading and 
writing for a card (2) of this type. 

21. System according to Claim 20, characterized in 
that it comprises as medium (1) a payment card (2) of 
the integrated circuit type and as device (3) a payment 

15 terminal (4) with reading and writing for a card (2) of 
this type and furnished with means of transferring data 
received from the said card (2), and/or processed by 
the terminal (4), into storage means (6) detachable 
from the terminal (4) proper and in particular 

20 transportable to a financial institution (BB) so as to 
perform therein a transfer of the said data. 

22. System according to Claim 20, characterized in 
that, in particular in the case where the device (3) is 
remote from the issuer of the payment and/or in the 

25 case of steps of inverse authentication of the device 
(3) by the medium (1), the abovementioned medium (1) is 
composed among other things, on the one hand, of the 
aforesaid integrated circuit card (2) and, on the other 
hand, of a communication element (7), for dialogue 

30 between the card and the said device (3). 



